CVE-2026-74697
Received Received - Intake

Linux Kernel Data Corruption in Broadcom bnxt_en Driver

Publication date: 2026-08-22

Last updated on: 2026-08-22

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Disable EOP for TPA on all chips to prevent data corruption EOP (End of frame padding) on the AGG ring may cause overlapping of zero padding at the end of one segment with the next segment's data. If Relaxed Ordering (RO) is enabled, the zero padding may overwrite valid data in the next segment and corrupt the data. Older chips (P5 and older) do not automatically disable RO when EOP is enabled. On some ARM systems, data corruption was reported on 57508 (P5) chips with RO enabled. Always disable EOP on all chips on the AGG rings when TPA is enabled to fix the data corruption.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-22
Last Modified
2026-08-22
Generated
2026-08-22
AI Q&A
2026-08-22
EPSS Evaluated
N/A
NVD
CVE-2026-74697
EUVD
EUVD-2026-64384

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux_kernel linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves data corruption in the bnxt_en driver. It occurs when End of Frame (EOP) padding on the AGG ring overlaps with valid data in the next segment, potentially overwriting it. This happens if Relaxed Ordering (RO) is enabled, especially on older chips like P5 and 57508.

Detection Guidance

Detection requires checking if the bnxt_en driver is in use and if EOP is enabled on AGG rings with TPA. Inspect kernel logs for bnxt_en errors or data corruption events. Check driver settings with ethtool or sysfs entries under /sys/class/net/<interface>/device/.

Impact Analysis

If exploited, this vulnerability could corrupt data transmitted over the network, leading to incorrect processing or loss of data. Systems using affected Linux kernel versions with the bnxt_en driver and specific hardware may experience crashes or incorrect behavior.

Mitigation Strategies

Update the Linux kernel to a patched version where EOP is disabled by default for bnxt_en. If updating is not possible, manually disable EOP on AGG rings using ethtool or driver parameters. Disable Relaxed Ordering (RO) if using older chips (P5 or older).

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-74697. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart